Drupal is a registered trademark of Dries Buytaert
Release: Leaflet 10.4.11 — Minor update available for module leaflet (10.4.11). Release: Session Inspector 1.0.8 — Minor update available for module session_inspector (1.0.8). Release: Migrate QA 2.0.4 — Minor update available for module migrate_qa (2.0.4). Release: CKEditor Description List 3.0.0 — Major update available for module ckeditor_descriptionlist (3.0.0). Release: FlowDrop 2.4.0 — Minor update available for module flowdrop (2.4.0). Release: JWT Token Refresh 1.0.4 — Minor update available for module jwt_token_refresh (1.0.4). Release: ConReg 1.0.0-beta1 — First beta version released for module conreg (1.0.0-beta1). Release: AI Image Studio 1.0.0-beta8 — New beta version released for module ai_image_studio (1.0.0-beta8). Usage Milestone: Role Theme Switcher — Module role_theme_switcher crossed 1,000 active installs. Module Revived: Decoupled Router 2.0.7 — Module decoupled_router updated after 11 months of inactivity (2.0.7).
← All modules

Maintenance VIP

No security coverage
View on drupal.org

This module allows site administrators to grant temporary, secure access to a site in maintenance mode using a special URL. This is useful for letting clients or testers review a site before it goes live without requiring them to log in. Access is granted via a unique token in the URL and expires after 24 hours.

The Maintenance VIP module allows site administrators to grant bypass access to a Drupal site in maintenance mode using a secure, shareable URL. This is ideal for giving clients, stakeholders, or QA teams temporary access to review a site before launch, without requiring them to have a user account or log in.

Features

  • Simple URL bypass: Access the site via /vip/{your-token}.
  • Secure sessions: Generates an HTTP-only, secure cookie valid for 24 hours to prevent hijacking.
  • Easy logout: Users can drop their VIP session by visiting /vip-logout.
  • Proxy friendly: Works flawlessly behind Nginx, Varnish, or CDNs since it integrates directly with Drupal's maintenance mode service decorator.

Post-Installation

Once installed, no complex permissions or cache rebuilds are needed to manage the token.

  1. Navigate to Configuration > development > Maintenance VIP (/admin/config/development/maintenance-vip).
  2. Scroll down to the new Maintenance VIP Token field.
  3. Enter a secure, unique string (e.g., client-review-2026) and save the configuration.
  4. Enable Maintenance mode as usual.
  5. Share your link (https://yoursite.com/vip/client-review-2026) with your testers.

Additional Requirements

This module is self-contained. It requires no additional external libraries or contributed modules.

Similar projects

Modules like Maintenance Allow IP or similar IP-whitelisting solutions exist. However, whitelisting IPs is often problematic and time-consuming when clients are on mobile networks, corporate VPNs, or dynamic IPs. Maintenance VIP solves this by using a token-based approach, making it much more flexible for non-technical users while keeping the site locked.

Supporting this Module

Feel free to open issues, feature requests, or provide patches in the project's issue queue.

Activity

Tracked releases
2
Tracked since
Apr 2026
Latest release
4 months ago
Releases (12 mo)
2 ▲ from 0
Maintenance
Active

Releases

Version Type Release date
1.0.1 Stable Apr 8, 2026
1.0.0 Stable Apr 8, 2026